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C END 

S601.. 1. GENERATE 6 MDS MATRIXES M r M 2 , Mg AT RANDOM 

S602.. 2. CHECK WHETHER ANY 8 COLUMN VECTORS SELECTED FROM 48 COLUMN 
VECTORS CONTAINED IN THE AFOREMENTIONED 6 MATRIXES FORM MDS MATRIX 
S603.. 3. CALCULATE INVERSE MATRIX OF THE AFOREMENTIONED 6 MATRIXES 
AND CHECK WHETHER ANY 8 ROW VECTORS SELECTED FROM 16 ROW VECTORS 
CONTAINED IN TWO ADJACENT INVERSE MATRIXES FROM MDS MATRIXES (NOTE 
THAT M^ 1 AND Mg" 1 ARE CHECKED AS ADJACENT MATRIXES) 
S604.. 4. IF ALL THE CHECKS ARE SATISFIED, THE 6 MDS MATRIXES ARE 
OUTPUTTED AS L 2 L g 



(57) Abstract: There are provided a highly safe encryption device and an en- 
cryption method increasing the difficulty of decryption. A Feistel type com- 
mon key block encryption repeatedly executes the SPN type F function having a 
non-linear conversion unit and a linear conversion unit by a plurality of rounds. 
The linear conversion of the F function corresponding to each of the rounds is 
made a linear conversion employing a square MDS (Maximum Distance Sep- 
arable) matrix. Arbitrary m column vectors contained in the inverse matrix 
of the square MDS matrix set in each of at least in continuous even-number 
rounds and continuous odd-number rounds is set as a square MDS matrix. By 
the present configuration, it is possible to realize encryption having improved 
resistance against linear attack in the common key block encryption. 
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©Fiinij, issit^^v Kjayjiuim-rsFe i s t e i m&m 

O^fl^^^Saa^-v ESMDS (Maximum Distance 
Separable) frJIJ£ SSffl LtzH&B&SitemtT ■&„ 'J>& < 
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h;uA<iE^MDsff?ij-efc^5SSi:-r^o *«j*i=«fcy, 
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m m m 

[0001] #38HSfcJ\ Bt^aSiS, feit/Bf-^Ma^fe, afetflca^fc^— ^-ynW 

[0003] f?!jx.fflC^— K^/hMO^g^Bt^a^v^— IC#— K£ 

[0004] Bf^ST/V=fyXA(c:«#^^<D^fe§^, ;fc|r<^ilrr3^ Bt^b^M^- 

i:m-^ft^#il(D«t^bT^^i-6#ilitBt^^:^^^M$^o 
[0005] *ii»Bf^^t^«^^T/V^yX^^^^ N ^mo{£#ii«fcSr<— 

— ^^mMa^fflbfcT/^TXA(Dft^^^(D^#M#i^ny^Bt^^ 

[0006] ft^^^#il^n5/^Bt^-(Z)T/WyXAtbT{*, FfJxJttBtJfSpBf^LT 
(DDES (Data Encryption Standard) T/V^yX^fct^ il^^^^^5oV^TJS<ffl 

[0007] DES^ft^$^*M|i^n5/^Bt^-(DT7V^yX^« N ^LT, At)*?— ?<D 
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[0008] u&>u £©£5fc#M»»^&«fc*5VYrra, ^m^^m^mm^mmt 

[0009] Bgp##*if fciSlfcaaWtf^S'eabSfcv ^<DHt^MS<75^<£t£/Wv ^ 

[ooio] ^^fi, ±iB^ffi^^M^-c^$tbfctco-efe«9, m&m^Mftmtirtett-r 

[0011] ^K^lgl©^®^ 

Maximum Distance Separable) ^\\^M^tM^WM^iMt\^X'Mff't^ 
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*5]E^MDSfT^J:La, LbflSjtfflcSJ'U J^O^lE#MDSfTWi£fT^J:La _ \ L 
[0012] ^K(DBf-^Ma^gO-|lii«i#^*5V^-C. £<b^ ffftaii^T^JrLa" 1 

[0013] £^ ^K(DBf-^MaSe^>— SIISS#^*5V>T. B«|EFeistelS#M|i^ 

[0014] $e>^ ^M©Bt^3iagis©— ^jfe««t!:*3v^ mmFm^mnmm^ 

[0015] ££>^ ^M(DBf^a^«<D— HJ6fi8^^*3V>T, tfrlBFiiife©|ft^^**fR 
[0016] $e>^ «PJ(Z)Bt^a^m<D-Hifetl#^*DV^-C, BUfEFlK^C^^mfR 

[0017] ;*3SBI§0>02©fllffiH\ 
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(Maximum Distance Separable) ^^M^tM^^M^Mt^X'M^l^ 

*§E^MDSfT^J:La, Lb^ilffi&Tk ^ofJuE^MDStT^^T^hLa" 1 , L 
b'^W^i-^^J^^h/^^fi^^ilJRbfcmfi^^lJ^^h/V^ioT^i-S^T 

[0018] «0^<DBf ^rmM^ik(D—mmmm^^^X, £b\^ itfrfB^T^JrLa -1 

, Lb _l ^«^1-§^iJ^h/^^{i#^^Xb^m^(D^J^^h/k^j;oT«^i-§ 

[0019] $e>^ ^^(DBt-^Ma^o— mmmm^^^x, tfriBFeisteiM*iii«i^ 
n^/^Bt ^-MacoT/v^yx^^, 7^^K#:2r(DBf ^-^ar/v^yx^-efe^, tuts 

[0020] $fb^ N «^(DBf ^a^fe^— HifeH#^^V^, BiffEFMm^«^ 

[0021] £fb^ «HK<DBf fM^?^-iiiil^v^, ttrlBFll^:^^^ 

[0022] $^>^ ^mm<Dm ^-mm^rn^— mmmm^^^x, mmFmwc^mnm^ 
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[0023] $e>JC *58M©^3©fflffiJ4, 

(Maximum Distance Separable)?? ^\\^M^\^t'W^M^^Mt\^X'M^f 
DSfT^J^^T^'J : La" 1 , Lb _1 ^«^i-^^J-<^h/^^^#^^Lfcm^(D^I 

^^h/v^J;oT*^i-^^iJ^^a3tTfe§E^MDStT^(-J;§^B^^ 

[0024] &4b\ «0j!(Dn>-tV— ^-^n^A« x 0tRf£, K^H 
WzVf, MinMVt. #>JxJi, cd^fd, MOfj;¥<DmmMt£, £>3v^ ^yhv— 

¥<Dmm ifriaotift nsm^^^—z -^ci^at^ 0 ^^^5^^^ 
[0025] ^§i3J!<D$fb^ffi(z> s #k w^-r^mm^mmm^m^ir^m 
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[0026] *2&m<Dm&\Z£tlt£. ^MM^i^Ifi^^ftSSPNSCFi 

f^i/K^ KMfo1-&Fmm<Dmi&^Wk%±m&^ E*MDS (Maximum Dist 
ance Separable)?? m^Mm\^tzM^M^^Mt\^Xmi^tt^\Z., 

[0027] $e>^ ^w^^w-u^ ^B^^^ximnm^^-r^spNm 

WFit^r, ^^^^»^5Eb^Ti-§FeistelM*M^05/^Bf^ffi^*DV > 
mt&^V&x Kttfo1r%FmWt(Dmmm%±m&, iE^MDS (Maximum 
Distance Separable) nm&Mm\^fcmftmm%±mt^Xmft-rZ>btb\^ ^ 

jfMF>snm%:mmir%mi$bu ^.nh^iE^M-Dsnm^^K umk3m&^ 
-tt)\ ^niE^MnsnFi&m)&ir&M)$bvfz.<DX\ r^T^s^y?^^ 

^m^m^Mir^mmm^nt^xh^m^tmm^x(DT^^s^y^ 

[0028] m UFeistem^^ixmm^mmy^y^^m^^irmxh^o 
m2^^m^tvxmm^n^Fmm(Dmm^^xnmir^mxh^o 
msrmmmm^m m^Mfamfcmmir%jEXftm<DM&Birmxhz> 

o 

[g|4]m=8, n=8(D128bit^ti5/^Bt^-^*Dit^3^(D|W|B#^^^-fe/KD#^- 
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[imi]#^:/K<DF|l@fci£^i-5^ 

[|l|12]#^^^K<DFS@m^^^i-a^^mff^JT^6E^MDS^J(^^# 
[g|13]^^^^K(DFMm^^S«ll^^^f^J^fc^lE^MDS^IJ(D^^ 

[im4]#7^K<DF|18fcf£5£^5^ 
M5]#7^K<DF|!8m^l£)£1-3|!|^ 
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[0029] j^r, #3&w©Bt ##ya3se. ^xxim^m^m, mm^^ e ^—^ • :?w 
( 3 - c ) 1^***5 j: tjw^fi:* mm ft _L&nmufc je#mds?t?!i<d 

[0030] [1. #a#t^n^^Bf-^T/V=fyXA^*5^^M^WMa] 

*i\ DES(Data Encryption Standard) f^&MKftm&tlZ>&MSl£fVy?Vfr%' 

[0031] *oi«fe/ny^Bf-^(DT/^yXA{*, itLt, A^f-^©'»HfTt^7^ 
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^l/TODES (Data Encryption Standard) 3&S&5 0 

[0032] Feistemmkm$n%ttmMft&mmy^y?m^<DMmz^x^ mi&mm 

[oo33] Feistei«^«, ^mm^w-m^mMuc^ , ¥JC%9$^X\^mirZ>nik 

mntr>hC05pJC^ N mnf>hC02o(DA^T f — (Plain-Left) 101, P (Plain-Right 

L R 

)102^#fiJU ^tt^rA^fei-^o 

[0034] Feistem^n^>^w^tx^^m^m^<Dm v )Mi,xmm^n, #9?^k 

^^^T ; -^mP#:»FP#:i20^P^{m§o ai(D«^-t?tt, Fit(7^^ 

Kffilk) 120^ r ^(9M$^fc«^^!)^bTV>^ o 
[0035] f?!j^.«||l# @ (D^O^rete, mnfcVh^A^T^X^ (H^rf ) 

^)^A^J$tt^mntVh(D7^^K#tK 103^Fg8^120^A^^^t> Fg|#:120^ 

i 

thZo ^©M, i-^t?^F|H»^fefetl,fc7^^K#:(r)fat^«9MbMbTBt 
^"fb-MS/^TU Bf^^C^f'J-X^- (Cipher-Left) , C (Cipher-Right)^ 

L R 

[0036] ^r>^K(D|M^:^L-c^^^^§FMml20(D«^^ov^-c, m2&mmi.xt&m 

ir% 0 02(a)[4, lo^r>^K^^F»l20^i-§A^*5J:U ? m^^i- 
El-efe^, 122(b) te, FKmi2O(O«^(Dpl0^i-E|-efc5o F§@i£cl20te, E|2( 
b) #a^^mJii:^^mii^^cL^V>t>^§SPNMo*^^W 

[0037] spnm<z)fm#:i2o«, ®2(b) Kmir^^ ^mj&m^m&mft-rzmwtvy 

S^V^(S-box) 121^rr3 0 9V^WWC^(Dm&fah<Dmn}?yh<DA£)iWX 

tt. ii^v^— /v§^^A^$n§^r»-K»^Nft!i^lrom^^f$^t, 

i 

^nfcV hfo#Ifi^g^i|ft§Ii (mf@ ) (DS^V^ 121 IC A^ $ 
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■ho 

[0038] S#y^l2l36^©W^^— ^*>5mntryh©ttJ^7teZr±, Bn^^^M^m 

[0039] I32^i-FB8^120«, Am^tVbft^ m xn(m, n:lt)tVK^>9, 

M^iB«ntVb(DAffi^^#o#a?f^mS^bT(^S^V^121», m{@M 

?ij i£ft£>/^c^£^ru mnmmm tvx<DmMmm^ 1 22« n ^(DTO#^ 

[0040] «^^m^l22^4o(t§^«^a^M1-§lE^f^J^M^I2l3i^i- 0 
03^i-lE^f^Jl25^, n=8, m=8(D#^(Z)^(J-efe§ 0 #H?F^mSB (S^V 
^121)^^t±iij$^cm{@(Z)nl:Vh^— *Z[1], Z[2], Z[m]CtUfc^^ 

>\?mm)M£)bVX(D^ Y[l], Y[2], Y[m]^^§^o fc^U 

^(D^iJ^M^^^1-^^^#«fc^ i C^^^^fc2«Aft:GF(2 n ) 

[0041] rtU*-C©FeisteiaBff#-ett. i-^TO^OFliic^l^C^^^SrfflV^V^ 

#:l20$|3(Z)^B^f|5122^$5V^alffi-r^Mffl(^m ; ff^J)^, #t©9!>^Kt 
[0042] H#<£>^#R#^ I^^F^^^^^dr-Y^-fe/Vi-^^J^oV^, ®4Sr#MbT 
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taw-rso **5. *KJffl#^*3v^fi, ^sr^-r»^»!ittA (^v^)tE^ott 

[0043] 04tem=8, n = 8(Dl28bitzfvy?fe^fc&l1r£3&(Dm^Mfr*Vl^fr<n& 

[0044] 3mm&&&^Fm&?(Dmmmft*c j r>'±/i't±. m&\*&t<d^~-*wi&i~4 

[0045] Otfcflgi) 

i7^yMA^i^©£^ii, t^t^n-cfcSA^^X Axi-i = (oo, 

00, 00, 00, 00, 00, 00, 00))-Cfc<9, ^^(DKt5W^t'tiX>t^(DS-ho^ 
^(DA^^V^Tifn-efe§A^^5>(AXi=(34, 00, 00, 00, 00, 00, 00, 00 

[0046] Jfc*5, AXi = (34, 00, 00, 00, 00, 00, 00, 00) (D8o©#^iij:, FSt^t 

*^^mfi (m=8) <DS7$v?x&* l£M1rZ>AJjMfrfcM}&1rZ> 0 M#(34) 
^is*V^(04^(D(Sl))^A^J$^ (00)^ H2~8S#y^t!:*hr5A 

[0047] &:i3-t?P (00) CDA^^^#oS*V^© ffl;fci£#fi*£p (00) „ H^T* 

— -^p (oo) oA^t^os^s/^ii, faoftMBfcfTfco^ 

#if CKDA^^(04(DF!|-e«^: 34) ^oS^^li, #ifn(DA^J^^ 
^Lfc#^^m^«rW^^^bT^^$«(D-C\ T*T>c7Stfy?x (Ac 
tive S— box) OTfiftSo 
[0048] 04©^n*tt, #ifn(DA^^5>(34)^A^-r^)10(DT^^S#V^(Sl) 
©^^(b7)^§*t^?), ^(Dte»#T^^^S#5/^S2~S8«ifn 

<©a^h^(oo) ^s<3v>-cm^7i^(oo)sr^^ mmmm><Dm$rxt}b\s 
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[0049] Wm2) 

^tV^s^V^ (Active s-box) frh<DmtsWMMKZMW±MXW$k& 

[0050] m4<Dm\z.&tfz>wmmmi£, ^y^>^(D¥mm^^^x^mrr^>m^um^K 

^i-&5#5£<^IE;^f m 25 ^ 

£l/T<7)AYi=(98, c4, b4, d3, ac, 72, Of, 32)&W,£)irZ) 0 05^i-||?« 

m^7^AYi=(98, c4, b4, d3, ac, 72, Of, 32) 
10(DT^^S^^(Sl)^^(Dm^^Z[l]=b7^(D^#b^fii^b 

[005f] ^<Di^>1^F|!@^ffi^^^LT<DAYi=(98, c4, b4, d3, ac, 72, Of, 32) 

= (oo, oo, oo, oo, oo, oo, oo, oo)tmmmWnm%n(xoR)WlWf)mft£ti, ffi 

[0052] r7V>F<DFmWttti£>MfrbL,X<D AYi= (98, c4, b4, d3, ac, 72, Of, 32) 

-f--<-rifn-efc§A^J^^AXi-l=(00, 00, 00, 00, 00, 00, 00, 00) b<Dffi 
m^afP(XOR)^M« N AYiX&%(DX\ ^(D^^K(i+D— ©A^^AX 
i+l= AYi=(98, c4, b4, d3, ac, 72, Of, 32) bftZo 

[0053] (JffctB3) 

i+lJty>Y(DFmW)^h<D\titsW7$ AYi+lft^ iy^VX<D Active S-box<D 

[0054] 1rf£fr1b, AYi+l= (ad, 00, 00, 00, 00, 00, 00, 00)X&<9, r7^>Vtn^ 
, no^ft (Bl4(7)f?!j-^«^: 34) ^oS-boxOfig (UlS^V^ (SI 

))^<z)^ifnfi:^o 0 0j!^^-ad^oo-efe^ o 

[0055] (*K«I4) 
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i+29V>h*(DT?7 L ^S^y?X (Active S-box) (SI) (D$\t)W^r7V^V 
WT^T^S^y^ (Active S-box) (Si) (D^tiW^h—^fcM^ , fft 
H4^i~J:5^+27l>^KOT^^S^V^((Sl)(Dffi^;||^b7^ 
&«9, i^^K-e<^T^^S*V^(Sl)(Dm^;^^(b7)^— iS:i-§ 0 :©f-^ 

X%Z>b\^bX$bZ> 0 

[0056] Z.<D J f—?Vm&26£.1rZ>b. \+2y^7>^(D¥m^<Dmtsm / ^ AYi+2 = (98, c 
4, b4, d3, ac, 72, Of, 32) #\ 2^M<D7V^X&%i7V^V<DFmWtCDWi£)M 
^*AYi=(98, c4, b4, d3, ac, 72, Of, 32) t—^CtZ>~ t\Zf£Z> 0 
[0057] ^D*^ #mWlmSfP^133-era:, 

AXi+l= AYi=(98, c4, b4, d3, ac, 72, Of, 32) 
AYi + 2=(98, c4, b4, d3, ac, 72, Of, 32)b, 

[0058] ^(DIS*. ^<Z)^(7^Ki+3)^(Dm^^^tffS(i+27^^K)^^^A 

>^^AXi + 3=(00, 00, 00, 00, 00, 00, 00, 00) bt£& 0 
[0059] Z.<D7V>Fi+3^ (D&A£) AXi + 3=(00, 00, 00, 00, 00, 00, 00, 00) 

9V^n^(D&A£) AXi-i=(oo, oo, oo, oo, oo, oo, oo, oo)tm^3— tV 

[oo6f] ^mmy^y^^z^^x, m^mKMir^mmmm^nt^t^x, m^t 

mWt^W-XtDT^^S^vP^Wt'PW^htlX^ V5 0 r^^s^V^i^ 
[0062] itftf£Uci;5 ^ MttMtit m&&&) f-*3V vr fcSi^^oA^T-^ (¥ 
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[0063] _h^(DH4^#Mbf-M-e«. ^KDS^V^ (SI) (D^T^T^S^y^^Xh 
ftM$T(VA£l7*—?<Dmj£lZ.£^>X, ^S^y^7^(D^T^"r^S^yy^b\^tz. 

[0064] ~<D£yf£mftMffi^Mir%M&&fa±^%fcfriC^ Ty-T^y*S^yy-X(Dm. 

&&^xfo& 0 

[0065] |l|4^#ML-Cf^0JU^(J^^oV^T, ^^^^^f*9Flt, ^ti±>^ 

t>ib, mi+\yy>vx\tr^^s^y^7mf)>sx^h(D(D^ 
[0066] mA\z.7^-r^mmy^yi7^^T;v^^M^ ^yv>v\z.^n^,m^M^M\^ 

[0067] jjci^ na«&t^ m^mmmim%^x(Dmyy>^(DFmm^m\^nmK 

[0068] ®6«m=8, n=8(D128bit^n^^Bf^-^4oit ; 55^(D^B#^5> d r J r>'-fe/^# 

^srtawi-sia-efcSo fcfcL, m^xm4hitcoT^^4hm^xm.mox^< 
?w^t\^xmm^^n^ti<Dmm&i6mmxmmirz>h<Db'rz> 0 



WO 2006/025416 15 PCT/JP2005/015815 

[0069] 5W^oFitW^^=3rt^t;H4, iitf^T©f-^til~7 

-efc«9 x v ^<&%MftM #f ic&i-tzm (y^^m) <DMVrlz.te\ ^^U#3o 
[0070] mmi) 

iJV>V^(DAj3W£(D&^ft\-i. i~-<Tifti-e$)?>A^^5>( AXi-l= (00, 
00, 00, 00, 00, 00, 00, 00))-efc«9^^^(DA^^^fcfct>^oCOS-box 
^<^A;^I^Tifp-^>5A^iE5>( AXi= (34, 00, 00, 00, 00, 00, 00, 00 

[0071] AXi= (34, 00, 00, 00, 00, 00, 00, 00) (D8o<£>#Ig3£f3\ FH^:^- 

«^$tb^mfi (m = 8) (DS^V^^* 151^5 A^H^^JSfSo (34) £5^1 
S^V^(B|6^<Z)(S1))^A^$^ (00) tf*. m2~8Stfy?XiZ.*t$-%>Aj3m& 

[0072] &:&litfj£Ub£5^ (00) ©A*^^oS#y^©ffl^l^^n (00) 
t?fet), ^^BI-rSRRt), -^n (00) 0 Ai/i^#oS#s/^ft , fBT^fN 

HTtt5„ — #ifn(DA^»^(lll6(D^!|-e«^:34)^#oS^V^(Sl)(D 
^^ N ^n(DA^^^J^bfc#a^m^*^m^^tbT|S^$^5^ 
"C, T9*r4-?&i£-y97> (Active S - box) -C&5 0 
[0073] g|6(D^tIt?«, ^nOA^/H^ (34) SrA^ltSlo© W>f^SJl?3/^(Sl) 
<Dffi^5Mb7)^££-£rC:&<9, ^te<^#T^^:/S^V^S2~S8te1fti 

TV^ 0 

[0074] 

?T4-?S^y?* (Active S-box) bV&&) frb<DMfim&ttMM&#M"ZWB& 
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AXi+l&fc3 0 

[0075] m6<DmK#>\^x^ &9&>'Wz:&m<Dm£t£m5Km^&z&fe<DjEjj$fmi25 

^i§a^m^Mf$tbi^^^KOF|»mmv f 7^^bT(DAYi=(98, c4, b4, 
d3, ac, 72, Of, 32) &m±)irZ> 0 
[0076] i^^K^FHafeW^^teLT© AYi= (98, c4, b4, d3, ac, 72, Of, 32) te, 

m6^i-#ftH6^awi4i^*DV^, t-<t^o-efc5A^i^( axi-i= ( 
oo, oo, oo, oo, oo, oo, oo, oo)tmmfft&nfa(xoR)mM-&m?f&ti, WlW 

f&gzibK 2fe»9^K(i + 1) ^©AiJi^ AXi+ l£r&3 0 
[0077] i^^^K(OFP#:W^;^^LTCD AYi= (98, c4, b4, d3, ac, 72, Of, 32) b, 

i-^T^nT?fo5A^7^9'(AXi-l=(00, 00, 00, 00, 00, 00, 00, 00)£tf># 

^ftBfo3?P(XOR) AYi-Cfe5<D-C % W^K(i+l)^tDAAMAX 

i+l= AYi=(98, c4, b4, d3, ac, 72, Of, 32) bt£Z> 0 
[0078] (^183) 

i+l^^^K^FM^^^m^^^AYi+l^^ i7^K"C(DActive S-box<D 

[0079] i"Jfet?*>, AYi+l= (34, 00, 00, 00, 00, 00, 00, 00)X*hV, Y7V^VbmWi 
, #^n(D^ft(06(Z)f?!jT1*^:34)^oS-box(Z)fig(^lS^V^(Sl 
))^(D^ifnft^o 0 

[0080] (^184) 

i+27^K<DF|ii&{£^^5A;frJ:J:* AXi=(34, 00, 00, 00, 00, 00, 00, 00 
)t, AYi+l=(34, 00, 00, 00, 00, 00, 00, 00) £<D#Mt!l#jf&Jafpg& 142^*3 

ifdCOA^J, AXi + 2=(00, 00, 00, 00, 00, 00, 00, 00)£&«9, Wjg^ i+2 
"7^lyY<D¥mWc^h(D\^tiW^h, 3— ^n<DtiSt}Wd, AYi+2=(00, 00, 0 
0, 00, 00, 00, 00, 00) bt£Z> 0 

[oosf] mm® 

i+3y^V(D¥mW\^^Xti\^ AXi+l=(98, c4, b4, d3, ac, 72, Of, 
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Z2)b^— /Vl£vi(Di+29 1 ?>'V(DFmWtitt£lMfrAYi+2=(00, 00, 00, 00, 0 

o, oo, oo, oo)t(Dmm^mm^m43K^n^mm^mm^^h<o,i+3y 

V^VCDFmWclCMir&Ajj &Xi + 3= AXi+l=(98, c4, b4, d3, ac, 72, Of, 3 
2) tt^ 0 
[0082] (^S6) 

i+3^>^(DF|li#Cffi^ll5>#\ AYi+3=(43, 00, 00, 00, 00, 00, 00, 00 
)bt£<9, /Hfn(Z)AXi + 2=(00, 00, 00, 00, 00, 00, 00, oo) b<DmWL#}Ws 
m%U^144\Z&tf%ffim&)tmnm(Dffi^bVX<D AXi + 4 = AYi+3 = (43, 00, 
00, 00, 00, 00, 00, 00)^+49V^(DFmWtA£lM:ftbf£Z)o 
[0083] (^^7) 

i+4^^^K»T^^S^V^ (Active S-box) (SI) (D\i\tsWM^Y7^Y 
'?<DT?Tjy'S^y?X (Active S-box) (Si) <Dftij^^ifcUy^-£\ 

H6^i-j;5^+4^^K(^T^^s#V^((si)(Dm^^^b7^ 

[0084] Z.<0*f— i+47 r 7^KOFM#:^m^^ AYi + 4 = (98, c 
4, b4, d3, ac, 72, Of, 32) #\ 2off)(Z)7^^K-efc§i + 29 f 7^K(7)#'ftto,K)i^a 
MS143<£>tti;ftM#AXi + 3=(98, c4, b4, d3, ac, 72, Of, 32) grf3r.£ 

[0085] £<Z>S^ #ffi^3®^P$P145-e«, 

AXi + 3=(98, c4, b4, d3, ac, 72, Of, 32) 
AYi + 4=(98, c4, b4, d3, ac, 72, Of, 32) b, 

%kbVX?!r—;vo<D\m:mt}-tZ> 0 

[0086] Wffi^ ^K(D^(y^n+5)^(DAtl^i-i, AXi + 5= (00, 00, 00, 00, 

oo, oo, oo, oo) bisXnfe&n&o 

[0087] ^(Dy^7ly^i+5^(D&A^I AXi+5= (00, 00, 00, 00, 00, 00, 00, 00) te N 
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^^^(D&At) AXi-l=(00, 00, 00, 00, 00, 00, 00, 00) /V 
[0088] ^(D*^^:, 7^>-K#:(D#U?^*J-LTT^^^S^V^(D^^if Aiirf , ^#5fc 

[0089] mmistcx? ^ MftMffi m&*km) ^x^ ^sM^oA^f-^ (¥ 

[0090] ±^(D06^#MLfc^l^*5V>-C. ftfrtbZc^ At)&ftt£?FmWc, 1rf£t>1b, %x 

l^^5>^^^ir/V^J;Omi+57^^K^OT^^S#V^#C^Oi:^o-CL* 
[0091] Bl6^#Mbfc^!j-e«, flKDS^V^ (SI) <DWT?T4yS^y?*X$bZ>s<? 

[0092] mA^d^umQ^m^x^ ^^^ijsy^v^m^mmm^^^^m^ 

^M^n^^Hf^Uff -TS^^-r^/V (Feistel) Sitmo^O^^K (i, i 
+ 2, i+4, i+2j)^UTV^ 0 
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[0093] r^gtj 

y^^r/v (Feistel) M&<D9V>nx*<DAJj^ft<D^ft (PL^fctePR) from 
7fc*5VvC\ AXi=(00, 00, 00, 00, 00, 00, 00, 00))T?fo9, ^{Ci+2jy^ 
K(j = 0, 1, 2, ..J(DFMm^m^^^#ffi^SI^P§|5-e^$tvTVN<j^@^ 
*3WC *>57^^Ki + 2k(d*3V^. tHM&Kl»aiPOj|g^0 (07^*31^ AXi 

+2j + i = (oo, oo, oo, oo, oo, oo, oo, oo) ) \ct^tM^^"m^W^^ 

[0094] -?r<DH#, i, i + 2, i+4, . . , \+2ky^>Y <DFmWt<£> t PlZfe&irZ>T?y L ^S^y 
>77\ (Active S -box) (D^b^'m^W^^^^^^^t^.T^'r^S^y^ 



a = jrtiw(AX i+2J ) 

7=0 



[0095] mj^(D37^^K\ S^^^K-e^^-e^^^lDHt^^r-Y^-fe/^^^S^fcT^ 
^^S#V^#C«2, -r>fct>*>a = 2-e*)5 0 

[0096] itff^Lfcj;^^ &mmy*vy?m^&tf%Mft&mizftir%mmmM<DX}b'D 
[0097] L3>u uKsr/^v^(Dx^zm^Bnmm7m^ir-<x(D^(DFmmcm^^ 
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[0098] [2. &mm^^y?^T;vdty^M^tf%UMMffi$&n~\ 

[0099] ^mmy^y^^T;V^^X\^m^^^Mt\,X(DS^y 

mmmx\±, ^<Ds^?x<DA&±)&mKri£uu &m<v axt -*(¥;&:) 

m^mbt^o 
[0100] [3. ^mm\^^<^^-^MT;v^)Xj^] 

[0101] ^0J^#§Bt^aT/V=fyXA(DlO(D#tt{*, «<DDEST/V^yXi>,<D#n 
Mf$b-&~F, li^OM^jE^MDS (Maximum Distance Separable) fT^'J^r 

[0102] ;fc^W^#§Bt^^ST/^yXi^ jE^MDS (Maximum Distance Sepa 
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[0103] j£mm<D^^r%mT/vcfyxj*\^ mi. 2^mm\^xmmvtcspNm(DFm^ 

[0104] Mx-ft. ¥JC(Dft$^2mnlf yh (fcfcU m, nYZ&Kmk) tl^X, 2mnfcVh(D^ 
mnt>h©2o©f-^PL (Plain-Left), PR(Plain-Right)^iiJU ^tt^A 

[0105] *^p^(D#j^^iov^-c«. Fmwc^<Dmmmm^^^xmmir%mKm$:%± 

MtDfctfXDftFlblsX, IS^COM^E^MDS (Maximum Distance Separabl 

y^^(D^x Km ^xmt£%AEjTMF>sftm$:mm~r% 0 

[0106] lE^MDS^lJ^oV^f^^i-§ 0 iE^MDSff?lJ^^T»(a), (b)<Dtt®£ 

(a) iE^T^J-Cfc5 

(b) fT^IJ^-a-^^i-^-C^f^fT^J (submatrix) (Dftm^ (determinant) 
"CfcV\ i'&ib^ det (submatrix) =£0 

[0107] _LfB (a) , (b) (Dm*&m&1r%ftm&jE^MUSftmbV¥& 0 

&mm7^?m^<v&9vi/vxmnir%FmmzMirZ) Am^vhK^m x n 

(m, n-.mWO^yhXm, Fitrt«§tl5»»^nt>h(DAm^^ 
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(D$m, n = 8, m=8(DiE^-MDSff^JO^!j'efc§o 
[0108] _h|B (a) , (b) ^m&ir^iE^MDSffmn., ^Y^A<D^U(D^mW^:^^ 
jJ^!>3i^hhw(A)i:U M£m#C(DlE;frMDSfT?!|£U x^lE^MDSfT^JM^CQA 

hw(x)+hw(Mx)^m+l (5£l) 

[0109] _h|E5£(5£l) tt, lE^MDSff #1 (M) diotlM^^A^f-^^f 
H©githw(x) £ N H^MDSfT^J (M) [aotIfit§tLfctij^f-^Mx 

©^n©53(ISfehw(Mx)©J|»SfcdS, jE^MDSfr^J©^toiJ:t)^:^5^v>5- 

[0110] f£$o^ jE^MDSfT^JtV^^ liiE^MDS- code (Maximum Distance Sepa 
rable Code) ©£jjfefr?!l<Z>« ^©>&^# J:fB&#«3»J£L-CV ^^£>£ 

[oin] iocDfr^i-^T<DFi8i&i;im^&^ 

[0112] ^WCi*, #^l?^KOFSimi-«E^MDSfT^I(D^#^/c'rfT^J^IJfflL 

[0113] £JITI-, ^(^^>-K#C)^2r(r^#:)(DFeisteM#a#i^l35,^Bt^^*5V> 
[01 14] ^5b\ £*T<£>tfc W ^*3V vt\ (9^^KHt) ^2r<DFeisteM#»|fe/n^Bt 
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fi^'J^LT, iS^fDM^lE^MDS (Maximum Distance Separable) ftm^h 

[0116] JWTOm. S#C(9?^K£&) ^2r(DFeistelM*il^ci^^Bf ^MMt^ 
J^LT, ri^T^qfia^E^MDStT^JrLl, L2, ••, Lq^^U J^i^^Hm) 
^2r(DFeistelM#illi^n5/^Bt^a«^^joitS^#C^ § <DFmWt*P <&BJ& 

fcLl, L2, ••, Lq, LI, L2--£LT, qf0(DJE^MDS^IJ^#«93gL^^i-^ o £ 
£>^, WOFltiCOV^ii, T^»F|8ifc^ib)lR^ LI, L2, ••, Lq, LI, 
L2- -i!LT, qjlSI^E^MDSff^J^^ML^^i-^o 
[0117] *K^iifflLfc#^!l^09i^i- o H9te, S^(7^m)^2r=12, ffc 
^^r=6(DFeistelM*iSlt^n5/^Bt^a*^iL/c^. q = 3, irfjtfrib, 12 
^(D7^^K«#oFeistelM*Mli^n^^^^a*^^*5V>-r3eS(Dm^ 

^i-^lE^-MDS=fT?IJ(Ll, L2, L3)^LTV^ 0 
[0118] |I|9<D#|j$te, 2mntf yYO)^^, mntVh©20(Z)f-^PL (Plain-Left) , PR( 
Plain-Right) ^#JL, ^X^A^«LT, ^^KM&WC, F^^lltf 
«^-Cfe«9, ^l^">^K»FM#:401*5j:W(DftfacD^>>^Kc7)Fmt, i--<-c02 

fcSPNS^oFPm-CfcSo 
[0119] 09<Z)i^^!l«r=6, a = 3Xm. &FmWt\H ^^i-fB^-Ln«lE^MDSfT^J40 
2^LTV^5 0 -fft*^ LI, L2, L3fi, ^tl^:tlM^3MMC01E^fMDSff^\ 

^Frnwc^mRmmzm ^xm^m^m^mmir^iE^Musn^}^ 
[0120] mMmmrmMLTi<Dm^Miy—^^K^^x, mio&mmL,xmm~t% 0 

[0121] [^5/^°S21] 
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[^^S22] 

qf|S|(DGF(2 n )_h(Dm^cE^MDS ; ft^JLl, L2, .... Lq^^i~§ 0 qjg|<£>GF(2 n 
) iKDm&jEjjMDSftmLl, L2, LqC^jfe^yffl^ife^oV^-CO^jiWtt, 

xmm-tZo 

[0122] ^-/7 P S22^*5V>T, q{|S<Z)GF(2 n )±C0m^:IE^'MDS=fT^ljLl, L2, Lq^ 
[^^S23] 

2i-l(l^i^r)^@(D^«m ; ff?IJMLT tclL ^^-T5 0 

2i- 1 (i- lmodq) + 1 

[^5/^°S24] 

2i(l^i^r)^g(D||«m : ff^J^MLT2 t^MLT ^^t§ 0 

i 2r-2i + l 

[0123] fllfctf, H9^i-*^!l, i-Zjifc)*,, 12l£(r=6)-C;fci9q = 3£L/c#1^ 
MLT1 =L1, MLT2 = L3 
MLT3 = L2, MLT4 = L2 
MLT5 = L3, MLT6 = L1 
MLT7 = L1, MLT8 = L3 
MLT9 = L2, MLT10 = L2 
MLT11=L3, MLT12 = L1 

[0124] Z.<D£yiC s ^W^Bf-^SSg^l^Tte, l£ifc(^^Ki^2 r cDFeistel 
M*iS«i^n5/^Bt-^Ma#^^J^L-C, r^T^qf@(^iE^MDSfT^J:Ll, L2 
, ••, Lq^^U^m^gi-oV^tiJl^^FM^^JllIi-Ll, L2, ••, Lq, 
LI, L2--£l/r, qjlSOE^-MDStT^J^^MUi^^U {^l£tf>FSii£c^O^-C 
J3\ T^fcS!©F|Hfc6^J|g^ % LI, L2, ••, Lq, LI, L2--£LT, qficDE^MDS 

[0125] #Cl!^ EllOO^a^n— ^^}t^^^°S22(Z)q'f|S|(DGF(2 n )_h(Z)m^jE^MD 
Sff^ljLl, L2, .... Lq(D^^a*5J:OT|^#:— (D^^*j^(Di¥^^oV^TI^0j! 
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( 3 - b) wm^m \z.n-rz> mm fa ±^mm^ftJE^MDsnm<o^^xxj^F m 

[0126] [ (3-a) H##*te*ht-£SN£|Ri -bSrl^LfejE^MDSff ^J©^ife*5J;OTIi 

^O^^JirUT, 3o©#yffi0flal, a2, a3fJloV>-CtftM-f So 
[0127] (MSI^Ial) 

[0128] [X^3/:/S101] 

GF(2 n )_hT\ qte<Dm^jE^MDStT^!lLl, L2, Lq^^A^^^fSo * 
38. -Ctt, MDS©itq = 6, J£^cifc:n=8, ^J©W:m 

[0129] [^^S102] 

qi@(Dm^ClE^MDSfT^JLl, L2, .... UiiCiSis^qmfa<Dm<D&M<DmM&J&. 

xTy?s 103 \z.mt*. ^Xf^^m^-i^^yy p sioiKht^o 

D*^3/:/S103] 

q'fiOm^ClE^MDSff^jLl, L2, Lq^, 9?^KI&2r<£>Feistel?§!*M$fc^n 
[0130] &L±<D'7vi J tXK£oX, qflSOm^JE^MDS^IjLl, L2, Lq3&S£jEft&*L5 
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[0131] rOj;5^bT^^Ufcq^H<Dm^:IE^MDSfT^lLl, L2, .... Lq£, 010^ 
#f$LTS£lKLfc, [^^S23], [XT5'^S24]©Mimot, ^(^^K 

QL&frhmiZLl, L2, ••, Lq, LI, L2' •bVXqffi<DJE&MVSftm&mVi&U8l 

m&8L<oFM&te"v^x^ T$L&<DFmm^nm^ li, l2, • •, Lq, li, 

L2- -irU-r, qffi©jE^DSff^JSr«|»)3gLi9:3t^-5„ 
[0132] ffi^^^K<DiE^MDSff^J^^I^9^^KOjE^MDSfT^ISr5:v> 

[0133] 

( a )^Fmwc(Dmnmmi-mnAE^Musxh^t, 

ZXltb (a) ~ (c) mft&<D9V>\*$C&W^Feistem&mm7 

[0134] Z.<D£ylZ.^ *M^iaot, *ii«fc/ny^BS ^K:fctt5^#*fc:*t?-53ft 
Siir^-sTf^/^ M*£LT, MftMtir m^W) &ftteifz.W&<DT?^>c7s 

[0135] (WJa2) 
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[0136] [^^S201] 

Ai7:^S^MDS<Dfimq, Jfc*C#cafc:n, tT^J<Z>lM'X:mi:LT, 
GF(2 n )_h-e, qi@<Dm&jE#MDSfT?!lLl, L2, Lq^7^A^^-f§ 0 ft 
*3. 012^-T^a— ~Cte\ MDS©itq=6, tfckc«:n=8, ?T^J<£>1MX:m 

[0137] [^^7°S202] 

q'fgOm^ClE^'MDSff^jLl, L2, Lq^-g ^§qm'f|S|(7)^J(D^^(Dmf@?r^ 

(b) fT^J^-a-*tLSi--<-C(Df R^T^'J (submatrix) (Z^T^IJ^ (determinant) 
T?&V\ irf^h, det (submatrix) 9^0 
[^^7°S203] 

qfiCOm^cE^MDSfT^JLl, L2, Lq^, 7^^K#:2r(DFeistel§U#Mii^n 

[0138] ^_h(D^°nir^^J:oT, qfiOm^lE^MDSfi 1 ^IjLl, L2, Lq^^j^$tt§ 

[0139] tff^<D^a^Jal^fe{t5iE^MDSfT^!l^J^^atJ:*3V^-Cfi^ EllKD^iSlv'— 
^^fcfcVvrtfcWUfcJ^fcU ^^S102^*dV>-C, qflS^m^ClE^MDS^IJ 
LI, L2, Lq^*n«qmffi©^J<0^^©m«^»3Wbfe^©|M^^ttSr 
W^Ufctf^ r(DMa#'!Ja2^*5(t ; 5IE^'MDS^T^lJ^^Ma^*3V^'C^i, qf@C0m 
^ClE^MDSfT^jLl, L2, Lq^-a-^tt§qmj@(D^J(Z)>r£#C0mfS^«9mbfci! 

[0140] ^ <Z) El 1 2 K^k-f-^M^—^^ \zMi fclE^MDSfT^J^ScMS^ £o T 
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ifrfcq'fHOm^E^MDSfT^.lLl, L2, LqflS, ^fMLfc^WUa lirl^H, 
@(cloV>T^_h^^^JI|S^Ll, L2, ••, Lq, LI, L2- • ^LTqfUl^iE^-MDStT 

^J«#fc»33gU9!J£U WcgfcOFlggcicov^tt, T^^FM^^HII^. LI, L 

2, ••, Lq, LI, L2--tVT,<iffi<DjEftMDSftm&f&yM\J&l£1rZ>o 
[0141] r.©«t5lC, ^#C7^VK(DIE^MDS^T^lJ^-S 1 ^:7^^KOJE^•MDS^f^J^5:v^ 

[0142] ^Mll^icj;??, 

z-tib (a) ~ (c) tmu&tiztitb. mm^<7)^>Km^w^Feistem^mm-f 

(d)E^MDScOttad^, aj|S|(a^m)<Z)T^-Y^S*>^(D^^-^J;o-C#^) 

[0143] roj;5^ ^WiR-ioT, *il^i35/^Bt-^-^*3it?)^5S:*^^-i-§3i 
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[0144] mmma3) 

[0145] [^5/7°S301] 

A^:^^MDS(Df@#Cq, tfc^«:n, :mtVX, 

"Ctt, MDS<Z>fS§fcq = 6, *fcfcc#:^:n=8, ?lj (DlMX:m=8<D:t#^M«!li: 

[0146] [^5/^°S302] 

?ljM'£*j£1-£ 0 
[^^S303] 

mfr, qm^lJOO^T^'JM' ^-^*tl,Sqm^:(D^lJ^^h/V^M ; fSi-S^i:^<m^:(Z)^lJ"< 
^h/^^^^q{i^^/i--y^{i«^5>f'JL. ^ti^ti^W— X^^ti^^ 
^h/^^m^C(Z)E^T^JLl, L2, Lq^, 7^^K#:2r(^FeistelM#Mli^n^ 

[0147] J^_h(D^°nir^^J:o-C, qfiOm^lE^MDSfr^JLl, L2, Lq^j^^ 

[0148] ^a^!|a3^*5TOiE^MDSfT^J^^^&3^oV>T, Hl4£#MLT, i*9*#: 

[^^S301] 

GF(2 n )±"T:\ l^(Dqm^lE^MDSfT?IJM££j$1-5 0 014^^i-J;5^, qm 

^iJM(D^:#c«qm^:J;<9^:tv vfc<£>-cfc £v >„ 

[^5'^ , S302] 

Ell4^i-J;5^, qm^!E^MDSfT^JM}6^m^:(DfT^#t^^ttt±lL, m 
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^m^WlttffiLT, mft, qm^lJ(Z)^lJM'^*^bT^J:V\ 
[^^7°S303] 

^h/V^m^IE^T^JLl, L2, Lx££$ci-£ 0 

[0149] Eii3, mi^mm^xwim^mimiy-^^m^fciE^MDsnm^m^m 

^£oT£j&£;h,fcq{i<Dm^lE^MDSfT^Ll, L2, Lqtf^ ^fcKHftl^Lfc&I; 
a^Jal, a2^$l, 5fc^, |I|10£#^L-CtftWLfc, [^5/^S23], [^^°S24 

irf£t>1b, -S 1 ^g^oV^{*_h{5L^^)lR^Ll, L2, ••, Lq, LI, L2--£L-Cq 

m<DiE^MDsftm&mMism'Mu mwc^Fmm^^^x^ ri±&<DFmm. 

d^HSl^Ll, L2, ••, Lq, LI, L2- -^LT^ q{@<DlE^MDSfT^J£*iEL1£5e 
[0150] ^<Z)J;5^ ^S#C7^^K(DIE^MDS^T^lJi:-S 1 ^:7^^KOIE^■MDS^T^J^5:v^ 

[0151] *mmK£9, 

(a)^-Fmwccomnmm : f^miE^MF)sxh^t, 

(c)ffi»^^Krt^^*<^aSMi-5qf@^FMm^^m§^^^T^J^i 

^ttfe (a) ~ (c) tmutstiztitb. mwc^(D^>K^^Feistem^mmy 
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(d)]E*MDSOttf^b> at (a^m) OT^T^S^^^^It ioti?) 

[0152] /jj*3 % &3#Ja3tf*#U:^;£&3£#1-5<£>kJ\ m, r, ^ ttiftUttQMWa 

[0153] £*btt, «ya^9a3l2:*5V^H:, At&m, rte^LTfc^SttfcB#|ffl^#l!:*&Sl 
RTffrfe^^ ^itfy-Kyn^ (Reed- Solomon) ^^O^J&^J<£> 

[0154] i<o*n.a^!la3lc:*3V^, _L3£UU;5fc:, #ffl«fc/ny^llff#i!i*3Jt5||^?fi:W! 

[0155] [ (3-b)<ft^*l!l*|~t-5»tt|*l J^^LfclE^MDSfT^J^i&^OTM 

^(DWtfeMbVX^ 2o©M»l, b2^oV>TtftMi"5o 
[0156] (MS^Jbl) 

[0157] [^5/7°S401] 

GF(2 n )_hT\ q^fDm^ClE^MDSff^JMl, M2, Mq&7^i?J±\Z.%.J$ l irZ) 
o &3b\ g|14^i-7n— -e^, JEjfMr>S(DmWtci = 6, J£;*C«::n=8, ff^JO 
1MX: m= 8(Dm^C0^MMtVX7jkVXh^o 
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[0158] D*7 1 5/:7 P S402] 

q^<Dm&jE#MDSfT#lMl, M2, .... MqfDij^T^jMl -1 , M2~\ .... Mq" 1 ^ 

[^^7°S403] 

qf^cDm^cE^MDStf ?'JL1, L2, Lq£, 7^7^K^2r(DFeistel§U*M|i^n 

[0159] ^l±CO^n^KXoX, qfiOm^iE^MDS^IjLl, L2, Lq^^^tbS 
o te&s q^r-efe§ 0 

[0160] ^(Dj;5^bT^j^LfcqjBI(Dm^cE^MDS^IJLl, L2, .... Lq£, 5k^, 010^ 
&mVX&mUt. [^^S23], [^^S24](D^S^^oT, £HBfc(?*^K 
Ht) ^2r<DFeistelM#aii^i3^^^^S«^£0#^(DFBIMC0^^m$P 

{i^^HII^Ll, L2, ••, Lq, LI, L2- • ^LTqfS^lE^MDSfT^J^i^MLSg 

#y«OF|8ifc^oV>T^ ri±^<DFmm^h\m^ LI, L2, ••, Lq, LI, 
L2- -tVX^ qjlSI^E^MDSff^J^^ML^^i-^o 
[0161] Z.<D£?lC, ^S^^^K»iE^■MDS^f^J^^ , >^K^7)JE^-MDS^t^J^^V^ 

[0162] **j£^J;<9, 

(a)#Fit©»lHlT^liiE^MDS-efe5^i, 
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[oi63] mmmb2) 

[0164] [^s/^S501] 

AiJ:^^jE^MDS©itq, J£^^C#::n, ?T#|<Df->fX:m£LT, 
GF(2 n )_hT\ qte<Dm^jE^MDSfr^JMl, M2, .... Mq^^^^^^i~5 
o &*3. 13161^^13— "Ctt, !E^MDS(Df@#:q = 6, ^»:n = 8, fr^JO 

[0165] [^^7S502] 

qi@<Dm^ClE^-MDSfT^!jMl, M2, .... Mq(DjgtfT#|Ml -1 , M2~\ .... Mq" 1 ^ 
gffiU ^^520(D^fT^i-^*tL^2m(DtT^^h/^^^#(^m^(DfT-<^h 

03^iMi\ ^r5-e^V>^«^5/7S401^if§ o fcfL, Ml'^Mq" 1 ^ P«9 

(b) ff ^lJ^-a-*tb§i-^T(Df R^fT^J (submatrix) (Dffm^ (determinant) 
"C&V\ irfjzfrjib, det (submatrix) ^0 
[0166] [^^7°S503] 

qf^COm^cE^MDSfT^JLl, L2, Lq£, 7^^K^2r<Z)Feistel§y#illi7n 

[0167] J^_h<7)7nir^^J:oT, q^Om^cE^MDSff^jLl, L2, .... Lq^£)££;ft£ 

[0168] Bff^^Ma^lbl^^ft^E^MDS^J^^Ma^^V^f*, BU5©#yffiS'— 
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(DM1, M2, MqO^T^'jMl -1 , M2~\ Mq~ 1 ^£;fr3qm'ftS|(D^IJ(7>f£ 

MDSfT^J^J^ySfc^V^TteU q-fB(Dm^CjE^MDS^T^!j(DMl, M2, .... MqCO 
igfT^jMl -1 , M2~\ Mq _1 ^^3qmi@<D?IJ<^#<Dm{@£^ffiLfc^ 

[0169] r El 1 6 t/Tf^lv'-^^ fc^o fclE;fr MDSfT^J£j$#LSfc <fco 

tbfcq^Om^lE^MDSfT^jLl, L2, .... Lq^ ^fcfclffiWUfc&JfflfllblilnlE^ 
StlC, |giO«r#fl&b-aft0§Ufc, [^^S23]. [^^^S24](D^ia^^oT, 

BlCOV^ri-h^aSd^HMia-l, L2, ••, Lq, LI, L2- •^L-Cq{|S|(DiE^MDS ; ft 
^J£»MU£?£U ffi^OFil^icov^tt, T^^FP^^JIR^. LI, L 
2, ••, Lq, LI, L2'-iUT,qffi©jE^DSff^JSrlftt)3gL,|9:je^-5o 
[0170] Z.<D£?K, ^S#C7^^KC0IE^•MDS^T^lJi: J $ 1 ^:7^^KOE^■MDS^T^J^5:V^ 

[0171] ^#^{^J:«9, 

(b) m^m^(D^^>^mcmm^x^ti^mmmn^k &£x*m 
[0172] [ (3-c) m^m^xx^m^m^nir^m^±^mm^fciE^MDsnm(D 
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[0173] MftJkmicMirznm&m^m ^mmr/^j^^ mio~mi3&mm 
^xmrnisfcfam, Fmm^mmmm^f^Bnmmicmmi-^iE 

^•MDSfT^J^rffrizS^Ma^al (Kill) ~a3 (013) (DX vf tlfr&f&m&T&mVX 

Ulio, *3J:TJ<IS14, 0l5&*flabT8£WUi^&SL F08$tf> 

[0 1 74] ^4>*«l*5 J; tfi8ltf£&*s Wtt ft -h&^mUh jE#MDSfr?!l tt, 

^a#!|al (El 1 1) ~a3 (El 13) (DV tt^^(D^i^, 
^LSf^bl (IH 14) , b2 (0 1 5) (DV ^-f tL^^^LS^, 

0HrCl£fT LT^cLfclE^MDSfT^J^ 0 lOtC^oV ^-Cf^0j!Lfc[^5/7 o S23 
[0175] -fftfrib, 

m a^tia i a^tib i % 

Manila 1 bt&Mfflh 2 , 
^Sf^^WiJbl, 
^S#!|a2^S#!|b2, 
Maf?!la3<k^a^!jbl, 
M«!Ja3i:M«!|b2, 

<DV>-f ^MDlI^^t^^oT, q^cDiE^MDSfT^J^fiScU 2rOFeistel 

mmir^nmtvx^ir^ 0 mk^ni^^xu±^m^mK'Li, L2, • •, Lq 
, li, L2"bvx<im(DjEjjMr>sftm&m v )MisWtmu mwc^Fmm^x^x 

T&&(DFmWtfrh)m^ Ll, L2, ••, Lq, LI, L2--£LT, q{il<DlE^MDS 
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[oi76] mu^mm^x, m^m^xximnmm^M-rmm^^^mm^fc^m 

[0177] [^5/yS601] 

GF(2 n )_hT\ qiSOm^ZE^MDSff^JMl, M2, Mq^7^^^^j^i~^) 
o ft$5, EU7^i"7n— -efi, jE^MDS(Df@#:q = 6, fc>C«::n = 8, nm<D 

[0178] [^5/^°S602] 

qfifDm^CZE^MDSff^jMl, M2, .... Mqf^^;5qm{@<D^IJ<Df£#<Dm{®£r 

(a) jEjfftmX&% 

(b) fT^Ji-^*ttSi-^<T(Df P^^T^'J (submatrix) Off ^'J^ (determinant) 
"CfcV\ -f-ftib*^ det (submatrix) ^0 

[0179] [^5/^°S603] 

q^fDm^ZE^MDSff^jMl, M2, .... MqfDigtff ^IjMl -1 , M2" 1 , .... Mq" 1 ^ 
IffiU ^^^52o(D^ff^t-^tt§2m(Dff-<^h/^^'fi#Om^:(DfT-<^h 

[0180] [^^yS604] 

qf@(Dm^:E^-MDStf ?IJL1, L2, Lq£, 7^^K^2r(DFeistel§U*M|i^n 
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[0181] £l±(D-7°ti~t^te£oX, q^KDm^CJE^MDS^T^ULl, L2, .... L.qtf£.f$&in%> 

[0182] ^©igiTl^-f-^yiii^- &ZsX\Zl^1t3E&MDSftW£M#^K£'oX£j$& 
tvfcqjlH^m^CJE^-MDS^IjLl, L2, .... Lq#\ H|10^#^bT|feKbfc, 
[^5/7 0 S23]. [^^7°S24](DMa^^o-C. S&(9?>1^#2r<©Feistel3! 

2, ••, Lq, LI, L2--^LTqj|S|(7)lE^MDS=ff^J^ , 9Mb^^U ISSfcHiOFMt 
ICOV^H:, Tf£l£<7>F|iifo^ib)lfi^ LI, L2, ••, Lq, LI, L2--^LT, qj@<DlE 

[0183] ^<DJ;5^ ^S^^^K»iE^MDS^f^J^-S 1 ^ , >^K(7)iE^MDS^f?lJ?^^v^ 

[0184] *«^J;<9, 

(b)^^blH#crto^m7^^Krt^^<^^1-^q{®^FM#ct3:^m^ 

z-tih (a) ~ (c) &i&m&ti%tiib. mm^<Dy^vm^^>Feistem^mm^ 

W?m^$&nM)$K&:\,^X, 3S^ci-^2q-l^^K^j b >VA-C, m^T^T^ 

(d) E^MDS(D'|4K/6^, a^HI (a ^ m) (Z)7^f^S*V^(Z)f ^- (iiotib 
n%Mftmz.tel*fZ>4¥H 00^itftm+ 1 -aj@J^_h^^^^^^fiE$^o J: 
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[oi85] ^.<dxdk. *MMiaot, Mfr&mte£Tfmftmm<DM^<DM$r<vmm\k 
mmb2, %±mma2bttQimmbi, ^nma3b^Mimi, %±mma3bmmmb2b$:m 

^t)^:Tqfi(DiE^MDS^IJ(D^^fV\ mk(7^VWl) & 2r<DFeistelM 

ffl-f-^ft^J^b-C, -^^g^oV^f^Ji^^^llR^Ll, L2, ••, Lq, LI, L2- 
•^LTqfS^H^MDSfT^I^M^^L, «Cl£<DF|l@»o^-a^ 
(DFBI^^JlR^, LI, L2, ••, Lq, LI, L2--£L-C. qfi<DIE^MDSfT^J3* 

[oi86] z.ti& -eofaw-cfct, ^^^i-^^H5feLT^M^f^J^GF (2 n ) _h-C?£g&$ 
tl5m X m(Dff ?'J^LT, mnfcVh^^mnlf>h^(D^— ^^^tH^^LT^^:^, 
mftMtir *5 J: T*^#ftJf ^^JH^GF (2) _h-e^$^mn X mn© 

fT^J^fflV>fc#^-et>^-e$>^„ Hilk ^#»GF(2 n )_h(D^J^IHC»^ 
i~GF (2) _h^f ?IJ^*j— e^fjS$^r^^-e^§ o J;o-CGF (2) ii^T^JteJ; 
K>-$tMtemm&mVX\, >5£V GF (2) l-e}ttTi:^J(D*t^mn*foh 
GF(2 n )(D#^lt-<'Cn^i:^ 0 ^^c^GF(2 n )±(D^IJ^ltT@^, GF(2) 
^(D^JOl^^nfi 1 @ ^*fj£L, l^ij g tel^n^ij g ^JSLTV^o o^tf? g 
}2 (i- 1) + Iff g fl»£> (i- 1) +nff g IC^-JSU i#l g (i- 1) + im g (i- 1) 
+ n^lj g I^JSLTV^o ±ot, GF(2 n )_h(7)ff^J^'9mLT<^m^^», GF 

(2) jrejeftsjxsff ^ij^ffiv tti&'tz>nn&i>L,<tenmft&&*) mirb 

V ^f^^^tU^V \ GF (2 n ) _h(Dm^:(Dff^lJ^<9 miiftf^«. GF (2 
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) _b-Cttn*©ff^»5(ISrmia^t9 , gf^Ltmn x mn<£>fr?!l<£#5r 

[0187] m&k^ ^^mm&mni-&^^fammw:t\^x<Dic^i?^—si'6oo<DMf&ffi\& 
m^mmm^^^xmn^imxh'o. ms^i-ic^v^.— /v6oo^ ^.n^m* 

[0188] g|18^^i-CPU(Central processing Unit)601« N Bf tMOiM', HT, 7* 

^irbTOH^^— ^^^i~-SROM (Read-Only-Memory) „ CPU601 
^(D^Wi^-VT, !7-^f^tLTtffl$tl5RAM (Random Access Memory 

[0189] Bf^-Mffl§P603«, m&tt±&\JtFeisteim&M&Vy?Vtt&MTA'=rVX 
0fl£fillt^&3:/n^A&ROMfct&faU CPU601^ROM^^t3^A^^ 

[0190] fL*»^«604ri, m^^MK^t^m^^^^K^x^t^nM 
[0191] ^fggp605^, #mm &mfrtz> s f—*Mi$ mm^xm, mz. 

[0192] l^_h, #^©^10iJ^MUi^f>, ^K^oV^P^bT^fCo U^Ufc^ 



WO 2006/025416 



40 



PCT/JP2005/015815 



irf^ib. M^b\^Kmx*mmm^X^fc(DX&<9. mmm 

[0193] /^*d\ mmm^K^^xmm^fc— jS^s^-k^t. wu-tyyvv^T, 

i§.^iA*^fc:=3^tv— ^rtcop^eyt^f^h— /^xmn^^\ ^v^^^, 
&»smx&z> 0 

[0194] f?!j;Lte\ :/l^^tefE®jKf*£LT(D/N— K^V^y^ROM (Read Only Memory 

— ROM(Compact Disc Read Only Memory), MO(Magneto opticaO^V^y, DVD( 
Digital Versatile Disc). m&f&9^ ^m^^V^<DVJ^—^/Vmmmmc, 

—mmh^^^mm^m(mm)vxis<^t^x^ 0 ^(Dxwj^-^/^m 

MMfofe, V ^ty%/<^—i?y7bV^Tb\-,Xm@i1r%~ttfX%Z> 0 
[0195] ^5b\ y°n^9A« N ±^Vfc£yfj:yj±—s<y*/vmMmfofrh^t°~— ZXC^T. 
h— ^-tzm, jTVlsu— K1MH>^, ^^^^b^l(9, LAN(Local A 

rea Network), -iV^— ^h£V^ofc^s>H7— ^Sr^LT. ^^t^— ^^^"^"efe 

[0196] /^*d\ mmmizmm&titi&McD%±mte, mm^^xm^mKmn^ti^^ 
M^mf^xm,^mf^(Dmm^m-mi^^h^h(D\zmm^\ 

[0197] _B£UbJ:5 fc, *mW<DMmz£ti^ ftmM&&&&£Tfim : J&&%m&&1r 

^SPNMOF^m^, iSm^^^K^^jSb^fi-SFeistelM^ii^^^yBt^ 
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Sl!l*5V^, WS&V^Y&X [^t5Flt©Ifi^a^, lE^MDS (M 
aximum Distance Separable) ff^l^M^fc.W^^^^^MtL-XMI'fir^tt 

ft^ZE^MDSfr^hLa, Lb^MU ^oguE^MDSfT^^fT^hLa -1 , Lh~ 

[oi98] zbK^ *mm<DMf&te£jn&, ^m^mmu^xxfm^mmu^ir^spNm 

X, mk?^^* ^Mlt^ir^FmWC(Dm^m^m^, iE^MDS (Maximum 
Distance Separable) nm^mm^tdm^^^Mt^Xmiir^tthK. 'P 

§^^*^^i-§^M^®t>^o^§Bf^bM^f*^®T^^^S^V^ 

mMVk&Mfr. ^&<Dm&£ft%m^mmnmmfc$o\ ^xmm *smx&% 0 
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m^mm 

Maximum Distance Separable) ffV^M^^td^^^^Mtl.X'Mlir^ 

ft^ZE^MDS^hLa, Lb^iM£:tX, ^^OglE^MDSff ^J^^f^'J :La _1 , L 
b _1 ^«^t-^^^^h/^^{i#t-il^bfcm{@(D^J^^h^^i;oT«^i-§^T 

[3] iilfBFeistelM*M|i^niy^Bt^-^ia(DT/^yXA« N 7^^K#:2rOBt^ffl 

, ^1fim^IE^MDS^lJ^#^i-^^lJ^^h/^^Mi«^il^bfcmf@(D^lJ^^h 

^ISl ^fB«(DBt^fflS®o 
[5] BfrfBFMto^^#^^^VNTMffl«M^§m#:^iE^MDS^J<D^-^ 
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titcn^fhMz&^xmm&tizftmM'frb&m&ti^ 
tiz>nmK£ox&f&£tix\ ttk&mkkrzn&gi Kmrnnm^-zmmWo 
[7] Feistem&mmfvypm^m&mnirzm^&nftSk-z&y. 

(Maximum Distance Separable) ^J£^fflbfc$|^^|&MS£LT||fTU 
b _1 ^*^i-^^J^^h/^^fi^^^bfcmf@(D^J^^h/V^J;o-C*^i-?.^T 
[8] Bff|EBf-^Ma^^*5V>T. 

/vicx^xm^ir^nm^jE^MBsnmxh^iE^MDsnmKx^m^^M^ 
[io] BiifBFi^mo^^^a^^v ^xmm-r^m^mwcfDAE^Musnm^ 



WO 2006/025416 44 PCT/JP2005/015815 

(Maximum Distance Separable)?? ^l^M^tzMB^M^iMtX^X'M^ 

W1$C7^V<D&XX\^ M^^lE^MDSft^J:La, LbMJB^ ^ofllE^M 
DS?T^Jtf»T^J:La~\ Lb _1 ^*^i-§^J-<^h/^^ftS^«b/cmj|i(D^J 

^hM^x^xmmir^nm^mm^xh^iE^MDsnm^x^mnm^ 
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